Email Security Analyst: Proofpoint Threat Specialist

Yoh,-A-Day-; McKinney (TX); Hybrid; USD 63,000 - 90,000; Full time

Benefits offered by this job

Medical, Prescription, Dental & Vision

Health Savings Account (HSA)

Life & Disability Insurance

401K Retirement Savings Plan

Direct Deposit & weekly epayroll

Referral Bonus Programs

Certification and training

Equal Opportunity Employer

Job summary

Proofpoint Email Security Analyst role at Yoh, a Day & Zimmermann company, in McKinney, TX. This contract-to-hire position is hybrid and focuses on monitoring dashboards, triage of threats, and incident escalation. Hybrid work arrangement in McKinney, Texas.

You will tune policies, review quarantines, coordinate with SOC and MS 365 teams, and document investigations. The ideal candidate has hands-on Proofpoint experience and strong email threat analysis skills, with clear communication.

Qualifications

• Experience using Proofpoint in an operational security role (monitoring, quarantine triage, investigations, policy tuning).
• Strong knowledge of phishing/BEC tradecraft and email analysis (headers, routing, URLs/attachments).
• Working understanding of Microsoft 365 / Exchange Online concepts and email authentication (SPF/DKIM/DMARC).
• Able to document work clearly and communicate with technical and non-technical users.

Responsibilities

• Monitor Proofpoint dashboards, alerts, quarantine queues, digest activity, abuse mailboxes, and user-reported phishing submissions.
• Triage and investigate email threats including phishing, BEC, impersonation, malware delivery, spam, and fraudulent communications.
• Determine risk using headers, sender reputation, SPF/DKIM/DMARC, URLs, attachments, domains, and message content.
• Use Proofpoint search to identify campaign scope and locate malicious messages across impacted mailboxes.
• Execute containment actions in Proofpoint: block/deny-list malicious senders, domains, URLs; manage allow/deny logic.
• Drive remediation and takedown actions and coordinate with IR/SOC when needed.
• Tune Proofpoint policies and protection controls to reduce false positives.
• Review quarantined messages and document rationale for release/block/escalation.
• Maintain block/allow lists and exception workflows with change control.
• Monitor SPF, DKIM, DMARC posture to reduce spoofing risk.
• Identify misconfigurations and coordinate with domain owners and Microsoft 365 admins.
• Support investigations involving account compromise and suspicious mailbox activity.
• Coordinate with SOC, IAM, IR, Microsoft 365, Legal, HR for sensitive investigations.
• Document investigation steps, remediation actions, and lessons learned.
• Create SOPs and response playbooks for Proofpoint-driven workflows.
• Track email-security metrics and report trends and remediation SLAs.
• Identify opportunities to automate repetitive tasks across investigation, containment, and reporting.
• Support Proofpoint enhancements, platform upgrades, policy changes, and onboarding new domains.

Skills

Proofpoint experience

Email threat analysis

MS 365 / Exchange Online

Documentation & communication

Job description

Proofpoint Email Security Analyst role at Yoh, a Day & Zimmermann company, in McKinney, TX. This contract-to-hire position is hybrid and focuses on monitoring dashboards, triage of threats, and incident escalation. Hybrid work arrangement in McKinney, Texas.

You will tune policies, review quarantines, coordinate with SOC and MS 365 teams, and document investigations. The ideal candidate has hands-on Proofpoint experience and strong email threat analysis skills, with clear communication.